AI Briefing#cloudflare
The latest AI and developer news about #cloudflare, with the original source and a short summary.
The latest AI and developer news about #cloudflare, with the original source and a short summary.
The weak private keys allow attackers to forge certificates for any domain to intercept traffic, prompting immediate updates to Cloudflare One, Tunnel, and CDN services.
The experimental release is available on npm and incubated within the Oxc JavaScript compiler toolchain.
Optimizing prompt caching and switching to Sonnet 5.5 reduced median review time from 4m 09s to 1m 32s while maintaining finding quality.
The preview model processes text and images in a single pass to extract, compute, and forecast values without generating tokens, avoiding hallucinations.
The approach uses Cloudflare Access to enforce identity checks before requests reach the gateway, preventing attackers from bypassing authentication to execute commands on the server.
Yelp, Delta, JPMorgan, and Amazon restrict or block AI agents from booking, banking, or shopping, citing security and policy violations.
The new system evaluates whether bots respect robots.txt and HTTP 429 signals to maintain their Verified status.
The new Forward action is in public beta, while Custom Functions are expected by year-end.
The suite unifies server routing, typed data access, and Cloudflare deployment into a single npm package to enable secure internal app shipping.
A pilot using ~1% of Cloudflare's network enabled OpenAI to index hundreds of millions of previously unknown web pages.
Analysis reveals malicious traffic shifted to other Russian hosting providers like Radist and Selectel while search indexing collapsed.
The fix resolved a rare empty-response bug caused by capability mismatches in shared CDN caches, achieving a 99.99% success rate.
Cloudflare D1 surpassed 5.5 million databases by decoupling control plane operations from query execution using Workers KV and Durable Objects.
Recent pipeline changes reduced backbone traffic by ~70 GB/s, saving significant CPU and memory resources.
Transformers are now generally available on all Cloudflare self-serve plans, allowing teams to filter and reshape logs before export using SQL.
Talorys deploys a private, single-user AI assistant entirely within a user's Cloudflare account using Workers, Durable Objects, and Workers AI, requiring no external servers or databases.
Clef-omni handles audio and video inputs natively, while Clef-flash drops to $0.038 per million input tokens but reduces its hosted context window to 24k.
Developers can now request interactive flamegraphs for active Workers and Durable Objects via the CLI or Cloudflare Dashboard to identify resource bottlenecks in production.
The move aims to let developers use the same primitives in more places.
The new landing page replaces the previous bento box layout with a map-centric interface and tabbed navigation to better serve journalists, policymakers, and everyday users.
The beta harness uses Clef for triage and specialist agents for investigation, keeping human analysts in control of final decisions.
The EmDash plugin registry now uses Cloudflare's Clef decision model to automatically screen listings for phishing, impersonation, and offensive content across both text and images.
Validating resolvers must trust the new KSK-2024 key before the switch to avoid breaking DNSSEC authentication.
Cloudflare has hosted 750 internships across 48 teams, with interns contributing to EmDash 1.0, post-quantum tools, and cache optimization.